This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer File: yc040dHEojBTzZlxYzGNZJp7Klc.cer (raw, json) Hash identifier: HdVmcoNgM/gjKk6wFKlGyzoWqesBlJjL5SvZMdCg6Gk= Subject key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBBB92ED5503EDFAAE32CA7020C508 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206063 IP: 185.39.252.0/22 IP: 2a04:7ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bb:92:ed:55:03:ed:fa:ae:32:ca:70:20:c5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:79:71:d4:e6:1d:96:85:fa:41:b6:a5:b9: 40:73:22:10:45:60:5e:9b:1f:ca:ef:22:2d:b3:ec: 00:2a:91:78:05:d3:27:ff:33:63:51:15:f4:57:43: 77:d5:d8:6e:c4:f8:78:90:e6:7f:c4:e4:1e:cd:f2: 83:9b:9b:a5:13:cc:59:85:90:b1:8b:01:57:84:fb: 3f:03:08:71:9f:c1:4a:13:12:98:fb:a1:61:c0:b9: a2:6c:8c:60:ec:82:b5:25:d2:5f:16:f3:56:71:f5: 25:81:e0:ff:83:65:71:88:3a:7d:94:21:1c:0d:37: 82:5a:1b:88:36:b9:79:2c:87:0f:c6:ce:84:73:c8: 63:ea:81:c5:7a:a5:26:86:d7:86:bf:e0:c1:00:25: d0:34:48:cb:d3:47:7a:83:40:05:68:3f:1f:b2:ac: 13:c9:ed:b5:44:57:78:68:de:09:54:bb:d4:86:ea: a1:dc:07:e7:28:da:e3:67:d4:b8:44:78:c2:0f:6b: 62:8c:66:b8:88:3e:a2:06:d9:9b:47:d2:d3:c3:90: 4e:4d:36:ac:27:99:49:82:b8:cf:98:cb:74:0e:dc: f6:3b:3d:4a:6e:b4:cf:0e:e8:a9:1a:b9:11:48:a2: cf:c1:a1:b1:74:ac:10:53:d9:51:20:50:4c:74:9a: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.252.0/22 IPv6: 2a04:7ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206063 Signature Algorithm: sha256WithRSAEncryption 80:9e:23:e6:92:f0:c5:ad:5a:f0:87:f3:9b:7d:21:33:d6:16: c6:25:ec:b2:e0:07:7f:11:22:f3:98:86:8e:78:ae:5d:86:25: 39:65:d3:1d:0e:a5:78:ae:89:81:74:0b:dc:48:75:ff:2c:ff: ec:67:04:1f:db:a5:7a:57:64:2f:f0:d6:c3:85:b8:e5:03:25: 7f:1d:cc:6d:76:06:f8:6e:86:8b:04:28:1c:ce:36:e3:1b:2d: ae:ed:56:c2:31:ef:75:3d:e8:47:86:22:ce:8f:44:0b:96:a9: 99:77:7a:7e:0e:51:ed:36:eb:e6:53:bd:ff:c4:34:70:2a:c6: 3b:21:dd:43:72:a6:ca:5e:48:a7:e1:28:66:ea:dc:05:98:d0: f8:eb:c9:46:32:6e:94:34:23:66:9e:31:38:c9:30:c9:44:8c: f1:82:0f:c0:86:2c:97:41:07:ae:d1:ce:cd:46:e5:28:93:4f: 23:a0:ce:88:39:e8:6e:0c:b3:86:ef:6e:06:1c:3b:ae:50:9c: 88:49:5d:2c:24:37:ec:a9:d3:85:71:aa:c0:db:92:27:df:51: 74:6a:5a:60:e6:16:75:38:89:a8:ae:30:1f:eb:b0:17:20:76: 58:43:8e:c6:39:55:73:08:f9:f2:96:a4:26:ca:64:84:fd:74: 60:b6:4e:96 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt567uS7VUD7fquMspwIMUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWNkMzhkMWQxYzRhMjMwNTNjZDk5NzE2MzMxOGQ2NDlhN2IyYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/d5cdTmHZaF+kG2pblAcyIQRWBe mx/K7yIts+wAKpF4BdMn/zNjURX0V0N31dhuxPh4kOZ/xOQezfKDm5ulE8xZhZCx iwFXhPs/Awhxn8FKExKY+6FhwLmibIxg7IK1JdJfFvNWcfUlgeD/g2VxiDp9lCEc DTeCWhuINrl5LIcPxs6Ec8hj6oHFeqUmhteGv+DBACXQNEjL00d6g0AFaD8fsqwT ye21RFd4aN4JVLvUhuqh3AfnKNrjZ9S4RHjCD2tijGa4iD6iBtmbR9LTw5BOTTas J5lJgrjPmMt0Dtz2Oz1KbrTPDuipGrkRSKLPwaGxdKwQU9lRIFBMdJpEMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMnNONHRxKIwU82ZcWMxjWSaeypXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzIyZTQ5 ZC02OTUzLTRmYzgtYTg5Ni1jNWMzNTg4MzdhODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvMjJlNDlk LTY5NTMtNGZjOC1hODk2LWM1YzM1ODgzN2E4NC8xL3ljMDQwZEhFb2pCVHpabHhZ ekdOWkpwN0tsYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSf8MA0EAgACMAcDBQMqBHrAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMk7zANBgkqhkiG9w0BAQsFAAOCAQEAgJ4j5pLwxa1a 8Ifzm30hM9YWxiXssuAHfxEi85iGjniuXYYlOWXTHQ6leK6JgXQL3Eh1/yz/7GcE H9uleldkL/DWw4W45QMlfx3MbXYG+G6GiwQoHM424xstru1WwjHvdT3oR4Yizo9E C5apmXd6fg5R7Tbr5lO9/8Q0cCrGOyHdQ3Kmyl5Ip+EoZurcBZjQ+OvJRjJulDQj Zp4xOMkwyUSM8YIPwIYsl0EHrtHOzUblKJNPI6DOiDnobgyzhu9uBhw7rlCciEld LCQ37KnThXGqwNuSJ99RdGpaYOYWdTiJqK4wH+uwFyB2WEOOxjlVcwj58pakJspk hP10YLZOlg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:08 2026 by rpki-client